From owner-freebsd-hackers@FreeBSD.ORG  Mon Apr 27 18:08:39 2009
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id A7504106567D
	for <freebsd-hackers@freebsd.org>; Mon, 27 Apr 2009 18:08:39 +0000 (UTC)
	(envelope-from sam@freebsd.org)
Received: from ebb.errno.com (ebb.errno.com [69.12.149.25])
	by mx1.freebsd.org (Postfix) with ESMTP id 698368FC1F
	for <freebsd-hackers@freebsd.org>; Mon, 27 Apr 2009 18:08:39 +0000 (UTC)
	(envelope-from sam@freebsd.org)
Received: from trouble.errno.com (trouble.errno.com [10.0.0.248])
	(authenticated bits=0)
	by ebb.errno.com (8.13.6/8.12.6) with ESMTP id n3RI8cku090274
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Mon, 27 Apr 2009 11:08:38 -0700 (PDT) (envelope-from sam@freebsd.org)
Message-ID: <49F5F4A6.8050902@freebsd.org>
Date: Mon, 27 Apr 2009 11:08:38 -0700
From: Sam Leffler <sam@freebsd.org>
Organization: FreeBSD Project
User-Agent: Thunderbird 2.0.0.18 (X11/20081209)
MIME-Version: 1.0
To: Jan Melen <jan@melen.org>
References: <49F5B6F8.4040808@melen.org>
In-Reply-To: <49F5B6F8.4040808@melen.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-DCC-sonic.net-Metrics: ebb.errno.com; whitelist
Cc: freebsd-hackers@freebsd.org
Subject: Re: IPsec in GENERIC kernel config
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Apr 2009 18:08:40 -0000

Jan Melen wrote:
> Hi,
>
> Again when I compiled a custom kernel just to enable IPsec in the 
> FreeBSD kernel it came to my mind why is it so that the IPsec is not 
> enabled by default in the GENERIC kernel configuration file? At least 
> for me the GENERIC kernel configuration would do just fine if the 
> IPsec would be enabled in it by default. Now I have to build a custom 
> kernel just for IPsec btw IPsec is even mandatory for a host 
> supporting IPv6.
IPsec incurs a performance hit.  Fix that and it can be enabled in GENERIC.

    Sam